[SECURITY] Fedora 14 Update: NetworkManager-0.8.4-2.git20110622.fc14

NetworkManager is a system network service that manages your network devices and connections, attempting to keep active network connectivity when availa ble. It manages ethernet, WiFi, mobile broadband WWAN, and PPPoE devices, and provides VPN integration with a variety of different VPN services...

Lasernet CMS <= 1.5 SQLi Vulnerability - Active Check

Lasernet CMS is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Community Server <= 2008 XSS Vulnerability - Active Check

Community Server is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Internet Explorer Shift JIS Character Encoding Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information that m...

77 Law Enforcement websites hit in mass attack by #Antisec Anonymous

77 Law Enforcement websites hit in mass attack by Antisec Anonymous Because of FBI's actions against Anonymous and Lulzsec including several arrests, Now AntiSec supporters have targeted 77 law enforcement domains and walked away with everything on them. 77 domains were hosted on the same server...

Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability References: =========== View: http://www.youtube.com/watch?v=eIgb9D-0DWs Download: http://www.vulnerability-lab.com/resources/videos/222.wmv Release Date: ============= 2011-07-14 Vulnerability Laboratory I...

ECoder <= 0.4.10 Reflected XSS Vulnerability - Active Check

ECoder is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1264

Cross-site scripting XSS vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory...

Cross site scripting

Cross-site scripting XSS vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory...

CVE-2011-1264

Active Directory Certificate Services Web Enrollment (AD CS Web Enrollment) on Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, R2, and R2 SP1 is affected by CVE-2011-1264. The vulnerability is a cross-site scripting (XSS) flaw in the Web Enrollment interface that allows remot...

CVE-2011-1264

Cross-site scripting XSS vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory...

Microsoft Certificate Services crossite scripting

Crossite scripting in Active Directory Certificate Services Web Enrollment...

MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295) (uncredentialed check)

Active Directory Certificate Services Web Enrollment is installed on the remote host. The remote version of this software is vulnerable to a cross-site scripting vulnerability that could allow an attacker to inject a client-side script into the user's web browser instance. %NASLMINLEVEL 70300 C...

Active Directory Certificate Services Web Enrollment Anonymous Access

The remote web server is running the Microsoft Certificate Services. However, the service is misconfigured in such a way that anonymous users can log into the service to request certificates, thus breaking the chain of trust. C Tenable Network Security, Inc. include"compat.inc"; if description...

Active Directory Certificate Services Web Enrollment Elevation of Privilege Vulnerability (2518295)

This host is missing an important security update according to Microsoft Bulletin MS11-051. OpenVAS Vulnerability Test $Id: secpodms11-051.nasl 5362 2017-02-20 12:46:39Z cfi $ Active Directory Certificate Services Web Enrollment Elevation of Privilege Vulnerability 2518295 Authors: Veerendra GG...

MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295)

A reflected or non-persistent cross-site scriting vulnerability exists in the version of Active Directory Certificate Services Web Enrollment installed on the remote Windows host due to improper validation of a request parameter. By using a specially crafted link, an attacker could leverage the...

Active Directory Certificate Services Web Enrollment Elevation of Privilege Vulnerability (2518295)

This host is missing an important security update according to Microsoft Bulletin MS11-051. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Active Directory Certificate Services Web Enrollment Cross-Site Scripting Vulnerability

Description Microsoft Active Directory Certificate Services are prone to a cross-site scripting vulnerability because the Web Enrollment component fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Tele Data Contact Management Server <= 1.1 Directory Traversal Vulnerability - Active Check

Tele Data Contact Management Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Storecalc Simple Web-Server <= 1.2 Directory Traversal Vulnerability - Active Check

Simple web-server is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...